Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
File: RYzFKgcHzDQKycf26QKLZLcCZ7w.mft (raw, json)
Hash identifier: PWdxlNfHzAh2kH+BXDMztgg6GGX4DG4rvRN4WrND3Hc=
Subject key identifier: B5:03:BA:69:5E:16:3F:6F:0A:62:23:99:4D:AE:A9:36:1A:0A:97:05
Authority key identifier: 45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
Certificate issuer: /CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Certificate serial: 0196BCA49C2969FD7C33EB574A1424DC2D2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
Manifest number: 068B
Signing time: Sun 11 May 2025 00:00:26 +0000
Manifest this update: Sun 11 May 2025 00:00:26 +0000
Manifest next update: Mon 12 May 2025 00:00:26 +0000
Files and hashes: 1: IkNC-TUcCoYBxsQeLh6_eg3WO0Y.roa (hash: FzBKtoxKdAzZGhoYpGryWwHPZ5WZpqNHKyLplIOiPAU=)
2: RYzFKgcHzDQKycf26QKLZLcCZ7w.crl (hash: FwGPQk8d4hrhBGu6oRGzjlbXFJyoC81KNvL6RrzUGo0=)
3: _5WIvJfKyXPt7q3eDEUV4dqzXLc.roa (hash: WY6kQSCLPQqO6U8inB26YKVMLyQQktJDfS2xbDWHzWw=)
4: uDI0D6qr7-usCDL-fgv2aBY_bUU.roa (hash: H5Mm89vS+5YR+a0XeYRvNkRodKD27aIsyfCqNBxXQhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:9c:29:69:fd:7c:33:eb:57:4a:14:24:dc:2d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Validity
Not Before: May 11 00:00:26 2025 GMT
Not After : May 12 00:00:26 2025 GMT
Subject: CN=b503ba695e163f6f0a6223994daea9361a0a9705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:74:e0:13:49:f0:b6:a8:e5:84:5d:1c:fd:b3:
32:c5:37:c5:ba:8d:b7:65:f0:d2:0e:26:75:61:b4:
6c:95:b0:ac:bc:cc:d9:c8:fe:97:b7:bc:e6:a4:82:
dd:54:35:5f:74:ab:de:5b:bd:d6:f3:b2:b2:fc:30:
37:b9:c2:3a:dc:a7:4a:3a:56:75:3f:cb:82:63:2f:
aa:1c:c3:e3:de:ea:cc:c2:f9:64:3c:ce:63:a2:36:
1e:63:07:26:c7:a4:0e:7a:ea:8b:e4:32:fc:c2:5c:
b7:1b:4c:bd:97:5a:83:ee:29:60:32:48:5c:3c:1b:
16:69:96:9a:65:96:16:1b:15:3f:47:02:12:af:ef:
ff:58:9d:98:c4:20:4f:f0:cc:ef:80:d8:0a:5d:ee:
d0:54:f0:4c:62:2c:c0:11:c6:56:34:75:d6:52:56:
76:52:1e:4c:3d:92:00:5a:8a:c6:35:ae:44:48:00:
a3:0a:c4:25:5d:27:d1:74:3d:0f:19:77:1d:cd:32:
fa:16:42:bf:c5:09:a9:bb:d0:71:74:c0:7d:10:86:
7e:b6:af:8c:57:1a:50:44:e5:88:ef:30:12:47:fb:
f4:f9:13:6e:0c:b7:25:9c:97:67:82:81:2d:64:56:
d8:96:ed:03:20:e6:77:fb:9c:57:82:4a:df:b7:97:
73:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:03:BA:69:5E:16:3F:6F:0A:62:23:99:4D:AE:A9:36:1A:0A:97:05
X509v3 Authority Key Identifier:
keyid:45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:31:4e:c4:95:04:73:57:2f:dc:e8:05:c7:d0:08:5e:9a:c2:
91:c0:bb:c5:48:d6:4f:4e:00:cf:85:37:fb:58:af:19:71:ca:
23:b7:e7:43:ad:c5:4d:a8:ad:b1:88:0b:47:b4:b3:db:77:13:
3d:cd:ae:a8:dd:4d:a9:eb:80:5b:ca:81:71:c2:b8:45:39:c6:
b8:87:67:c3:4b:72:7d:4d:e3:93:0c:3c:c6:71:89:a9:61:ab:
f1:ba:35:90:25:7c:44:34:ed:b3:a2:d2:31:4f:e2:ca:85:de:
6a:80:ae:91:62:d0:68:2f:15:bf:1e:dc:07:a0:33:27:c5:44:
20:0f:33:94:00:e8:3a:03:6b:b1:7f:63:30:9e:c6:b6:d6:ec:
d5:90:e9:ee:9c:86:63:4e:65:56:52:d8:32:0e:e9:e6:3a:fa:
5c:7d:37:46:30:68:22:40:56:d3:a2:3b:13:40:bd:f7:66:af:
5b:7a:fd:ce:38:d6:f5:6c:33:6a:b4:e5:eb:55:a8:60:6a:de:
da:70:3b:49:59:eb:ba:bb:83:80:e5:b1:f1:f1:af:03:41:35:
be:85:3a:4f:05:f9:90:ea:9a:e6:9d:37:89:0d:8a:d2:9d:2c:
6e:38:8e:56:cb:5a:6c:91:53:d8:90:a8:61:21:5c:6a:72:96:
58:33:b5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 07:38:23 2025 by rpki-client